Lucene search

K

[email protected]NVD:CVE-2023-3993

HistoryAug 02, 2023 - 1:15 a.m.

CVE-2023-3993

2023-08-0201:15:09

CWE-200

[email protected]

web.nvd.nist.gov

4

gitlab

vulnerability

access tokens

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6

Confidence

High

EPSS

0.002

Percentile

62.3%

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint.

Affected configurations

Nvd

Node

gitlabgitlabRange14.3–16.0.8community

OR

gitlabgitlabRange14.3–16.0.8enterprise

OR

gitlabgitlabRange16.1–16.1.3community

OR

gitlabgitlabRange16.1–16.1.3enterprise

OR

gitlabgitlabRange16.2–16.2.2community

OR

gitlabgitlabRange16.2–16.2.2enterprise

References

gitlab.com/gitlab-org/gitlab/-/issues/409570

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6

Confidence

High

EPSS

0.002

Percentile

62.3%

Related for NVD:CVE-2023-3993

vulnrichment1 osv2 debiancve1 prion1 nessus2 redhatcve1 cve1 cvelist1 freebsd1